ArtHouse Cloud Logs new v1 Uploaded by a Telegram User Exposed 173,473 Records.

On June 17, 2026, a Telegram user uploaded a stealer log called "ArtHouse Cloud Logs new v1." It exposed 173,473 records. That includes email addresses, plaintext passwords, and login URLs from users across the United States. This is one of the largest stealer log leaks HEROIC has tracked this year.

Why 173,473 Exposed Passwords Is a Serious Problem

Scale changes everything. A leak this large gives attackers a massive pool of live credentials to test at once. Every plaintext password in this file works immediately, no cracking required, no guessing needed. With this many records, even a small percentage of reused passwords adds up to thousands of compromised accounts.

What Was Exposed

• Email addresses
• Plaintext passwords
• Login URLs tied to each password

Why This Matters

Large stealer logs are gold for credential stuffing. Attackers automate the process, testing stolen logins across banks, email providers, and retailers in bulk. The result is a wave of account takeover, identity theft, and financial fraud that ripples out far past the original 173,473 accounts.

How a Leak of This Size Happens

Stealer malware spreads through cracked software, pirated games, and fake updates. It reads saved passwords straight from infected browsers and bundles them into a log. A file this large usually means the malware infected many devices before anyone noticed, or that several smaller logs were merged into one large occurence before the upload.

Once uploaded to Telegram, a log this size gets copied and shared fast. Criminals recieve access to the full file within hours, and testing begins almost immediately.

Check If You Are Affected

With over 173,000 records involved, the odds of being affected are higher than usual. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records. Check now and change any exposed passwords today.